Commits · 412b65d15a7f8a93794653968308fc100f2aa87c · jan.koester / Linux · GitLab

Apr 18, 2017
- KEYS: fix keyctl_set_reqkey_keyring() to not leak thread keyrings · c9f838d1
  Eric Biggers authored Apr 18, 2017
  c9f838d1
- KEYS: Change the name of the dead type to ".dead" to prevent user access · c1644fe0
  David Howells authored Apr 18, 2017
  c1644fe0
- KEYS: Disallow keyrings beginning with '.' to be joined as session keyrings · ee8f844e
  David Howells authored Apr 18, 2017
  ee8f844e
Mar 29, 2017
- rtnetlink: Add RTM_DELNETCONF · 983701eb
  David Ahern authored Mar 28, 2017
  983701eb
Mar 02, 2017
- sched/headers: Prepare to remove the <linux/magic.h> include from <linux/sched/task_stack.h> · 50d34394
  Ingo Molnar authored Feb 05, 2017
  50d34394
- sched/headers: Prepare to use <linux/rcuupdate.h> instead of <linux/rculist.h> in <linux/sched.h> · b2d09103
  Ingo Molnar authored Feb 04, 2017
  b2d09103
- sched/headers: Prepare for new header dependencies before moving code to <linux/sched/task.h> · 29930025
  Ingo Molnar authored Feb 08, 2017
  29930025
- sched/headers: Prepare to remove <linux/cred.h> inclusion from <linux/sched.h> · 5b825c3a
  Ingo Molnar authored Feb 02, 2017
  5b825c3a
- sched/headers: Prepare for new header dependencies before moving code to <linux/sched/user.h> · 8703e8a4
  Ingo Molnar authored Feb 08, 2017
  8703e8a4
- sched/headers: Prepare for new header dependencies before moving code to <linux/sched/signal.h> · 3f07c014
  Ingo Molnar authored Feb 08, 2017
  3f07c014
Mar 01, 2017
- selinux: wrap cgroup seclabel support with its own policy capability · 2651225b
  Stephen Smalley authored Feb 28, 2017
  2651225b
- KEYS: Differentiate uses of rcu_dereference_key() and user_key_payload() · 0837e49a
  David Howells authored Mar 01, 2017
  0837e49a
Feb 28, 2017
- lib/vsprintf.c: remove %Z support · 5b5e0928
  Alexey Dobriyan authored Feb 27, 2017
  5b5e0928
Feb 25, 2017
- mm, fs: reduce fault, page_mkwrite, and pfn_mkwrite to take only vmf · 11bac800
  Dave Jiang authored Feb 24, 2017
  11bac800
Feb 10, 2017
- KEYS: Use memzero_explicit() for secret data · 52176603
  Dan Carpenter authored Feb 09, 2017
  52176603
- KEYS: Fix an error code in request_master_key() · 57cb17e7
  Dan Carpenter authored Feb 09, 2017
  57cb17e7
Feb 08, 2017
- selinux: fix off-by-one in setprocattr · 0c461cb7
  Stephen Smalley authored Jan 31, 2017
  0c461cb7
- selinux: allow changing labels for cgroupfs · 1ea0ce40
  Antonio Murdaca authored Feb 02, 2017
  1ea0ce40
Feb 07, 2017
- selinux: fix off-by-one in setprocattr · a050a570
  Stephen Smalley authored Jan 31, 2017
  a050a570
Jan 27, 2017
- ima: allow to check MAY_APPEND · 20f482ab
  Lans Zhang authored Jan 06, 2017
  20f482ab
- ima: fix ima_d_path() possible race with rename · bc15ed66
  Mimi Zohar authored Jan 17, 2017
  bc15ed66
Jan 24, 2017
- Introduce a sysctl that modifies the value of PROT_SOCK. · 4548b683
  Krister Johansen authored Jan 20, 2017
  4548b683
Jan 23, 2017
- exec: Remove LSM_UNSAFE_PTRACE_CAP · 9227dd2a
  Eric W. Biederman authored Jan 23, 2017
  9227dd2a
- exec: Test the ptracer's saved cred to see if the tracee can gain caps · 20523132
  Eric W. Biederman authored Jan 23, 2017
  20523132
- exec: Don't reset euid and egid when the tracee has CAP_SETUID · 70169420
  Eric W. Biederman authored Nov 17, 2016
  70169420
Jan 19, 2017
- Introduce STATIC_USERMODEHELPER to mediate call_usermodehelper() · 64e90a8a
  Greg Kroah-Hartman authored Jan 16, 2017
  64e90a8a
- Make static usermode helper binaries constant · 377e7a27
  Greg Kroah-Hartman authored Dec 11, 2016
  377e7a27
- LSM: Add /sys/kernel/security/lsm · d69dece5
  Casey Schaufler authored Jan 18, 2017
  d69dece5
Jan 16, 2017
- apparmor: fix undefined reference to `aa_g_hash_policy' · 3ccb76c5
  John Johansen authored Jan 16, 2017
  3ccb76c5
- apparmor: replace remaining BUG_ON() asserts with AA_BUG() · e6bfa25d
  John Johansen authored Jan 16, 2017
  e6bfa25d
- apparmor: fix restricted endian type warnings for policy unpack · 2c17cd36
  John Johansen authored Jan 16, 2017
  2c17cd36
- apparmor: fix restricted endian type warnings for dfa unpack · e6e8bf41
  John Johansen authored Jan 16, 2017
  e6e8bf41
- apparmor: add check for apparmor enabled in module parameters missing it · ca4bd5ae
  John Johansen authored Jan 16, 2017
  ca4bd5ae
- apparmor: add per cpu work buffers to avoid allocating buffers at every hook · d4669f0b
  John Johansen authored Jan 16, 2017
  d4669f0b
- apparmor: sysctl to enable unprivileged user ns AppArmor policy loading · e3ea1ca5
  Tyler Hicks authored Mar 16, 2016
  e3ea1ca5
- apparmor: support querying extended trusted helper extra data · e025be0f
  William Hua authored Jan 15, 2017
  e025be0f
- apparmor: update cap audit to check SECURITY_CAP_NOAUDIT · 12eb87d5
  John Johansen authored Jan 16, 2017
  12eb87d5
- apparmor: make computing policy hashes conditional on kernel parameter · 31f75bfe
  John Johansen authored Jan 16, 2017
  31f75bfe
- apparmor: convert change_profile to use fqname later to give better control · aa9a39ad
  John Johansen authored Jan 16, 2017
  aa9a39ad
- apparmor: fix change_hat debug output · c3e1e584
  John Johansen authored Jan 16, 2017
  c3e1e584